vlock 2.2-rc3 (Development branch) |
|
|
Wednesday November 28, 2007. 04:16 PM FreshMeat
vlock is a program to lock one or more sessions on
the Linux console. This is especially useful for
Linux machines which have multiple users with
access to the console. One user may lock his or
her session(s) while still allowing other users to
use the system on other virtual consoles. If
desired, the entire console may be locked and
virtual console switching disabled.
License: GNU General Public License v2
Changes:
A critical security problem (a local root exploit)
was found and corrected: previous versions of
vlock (since 2.2 alpha1) contained a serious flaw
that allowed any user to execute arbitrary code as
root. This was possible because plugin names
could contain "../", thus escaping the pre-defined
plugin directory. All users of vlock 2.2
development versions are advised to update.
Besides the security issue, script handling was
improved and two more example scripts were added.
|